VirusTotal doesn’t indicate keepassxc.exe 2.7.7 contacts this address. I’d be careful. Check the binaries’ signatures. Try a full install to see if that behaves differently.
Well, apparently, this is an A record for api.github.com. This name resolves to a different IP around the globe. See www.whatsmydns.net/#A/api.github.com
The IP is detected as “clean” on VirusTotal: www.virustotal.com/gui/ip-address/…/detection , although apparently (probably not surprising as it is github) is also a favorite address for everything including malware.
Maybe you can ask in the keepassxc discussion forum on github.
Checking the hash is only useful to confirm a correct download. If someone can change what binary you download, they can also change the hash and would be stupid not to…
Forsure, but if you still had the download and went to the sites official page today and could check if it matches to alleviate fear you downloaded a fake version etc.
Add comment